boris257 Goto Github PK

bpf-opa-demo

falco with opa as a rule engine

bpflock

bpflock - eBPF driven security for locking and auditing Linux machines

cbsensor-linux-bpf

Linux endpoint events for BPF enabled systems

clair

Vulnerability Static Analysis for Containers

csi-driver-smb

This driver allows Kubernetes to access SMB Server on both Linux and Windows nodes.

csi-driver-zram

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

domdig

DOM XSS scanner for Single Page Applications

ehids-agent

A Linux Host-based Intrusion Detection System based on eBPF.

elkeid

Elkeid is a Cloud-Native Host-Based Intrusion Detection solution project to provide next-generation Threat Detection and Behavior Audition with modern architecture.

falco

Cloud Native Runtime Security

go-conntracer-bpf

Go library using eBPF to trace network flow events

goval-parser

OVAL parser written in go.

htcap

htcap is a web application scanner able to crawl single page application (SPA) recursively by intercepting ajax calls and DOM changes.

htcrawl

Htcrawl is nodejs module for the recursive crawling of single page applications (SPA) using javascript

kubeclarity

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

kubecon2020

leaksignal

Leaksignal Proxy-Wasm Filter Module

linux-flow-exporter

eBPF based IPFIX exporter. This software is an IPFIX flow-exporter for routing with Linux kernel. It records flow stats forwarded by the kernel using tc-ebpf, without AF_PACKET or conntrack. This flow-exporter supports multipath environment with less performance issues.

lkrg

Linux Kernel Runtime Guard

machine-learning-in-ebpf

This repository contains the code for the paper "A flow-based IDS using Machine Learning in eBPF", Contact: Maximilian Bachl

pentest-in-docker

Docker image to exploit RCE, try for pentest methods and test container security solutions (trivy, falco and etc.)

redcanary-ebpf-sensor

Red Canary's eBPF Sensor

sbom-operator

Catalogue all images of a Kubernetes cluster to multiple targets with Trivy

seektar

Seekable dynamic tarballs

shawk

[PoC] A socket-based tracing system for discovering network service dependencies. (renamed from transtracer)

tcptracer-bpf

eBPF program using kprobes to trace TCP events without run-time compilation dependencies

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

ved

Vault Exploit Defense